News & Updates

New Buhti ransomware operation uses rebranded LockBit and Babuk payloads

/

The recently identified Buhti operation targets organizations worldwide with rebranded LockBit and Babuk ransomware variants. Researchers from Symantec discovered a new ransomware operation called Buhti (aka Blacktail) that is using LockBit and Babuk variants to target Linux and Windows systems worldwide. The ransomware operation hasn’t its own ransomware payload, however, it uses a custom information […]

The post New Buhti ransomware operation uses rebranded LockBit and Babuk payloads appeared first on Security Affairs.

News & Updates

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

/
A critical security vulnerability has been disclosed in the Open Authorization (OAuth) implementation of the application development framework Expo.io.
The shortcoming, assigned the CVE identifier CVE-2023-28131, has a severity rating of 9.6 on the CVSS scoring system. API security firm Salt Labs said the issue rendered services using the framework susceptible to credential leakage, which could
News & Updates

New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets

/
A new stealthy information stealer malware called Bandit Stealer has caught the attention of cybersecurity researchers for its ability to target numerous web browsers and cryptocurrency wallets. 
“It has the potential to expand to other platforms as Bandit Stealer was developed using the Go programming language, possibly allowing cross-platform compatibility,” Trend Micro said in a Friday report
News & Updates

New PowerExchange Backdoor linked to an Iranian APT group

/

An alleged Iran-linked APT group targeted an organization linked to the United Arab Emirates (U.A.E.) with the new PowerExchange backdoor. Researchers from the Fortinet FortiGuard Labs observed an attack targeting a government entity in the United Arab Emirates with a new PowerShell-based backdoor dubbed PowerExchange. The experts speculate that the backdoor is likely linked to an […]

The post New PowerExchange Backdoor linked to an Iranian APT group appeared first on Security Affairs.

Exit mobile version